Privacy policy
How Sideplay handles your information
This policy describes the information Junlab processes to provide and protect Sideplay.
Effective October 22, 2026
What we collect and why
When you sign in with GitHub, we receive and store your GitHub user ID, username and verified email address to identify your account and review access. We do not receive your GitHub password or store the OAuth access token.
For subdomain and gallery features, we store your account status, requested address, description, server hostname or IP, protocol and port, project title, description, URL, category, visibility and uploaded images, your likes, quota requests, review and deployment history. Public projects appear in the gallery; unlisted projects are available to anyone with the link; private projects stay in your workspace. Visible project pages show the project details, images, URL, GitHub username and like count, but not server connection settings.
The Sideplay tag installed on subdomain services sends the page's hostname and project value. Sideplay stores this only as the time of the subdomain's last signal; it sets no visitor cookies and does not identify visitors. We may periodically fetch the HTML of a subdomain's first page to check for the tag.
We use the Channel Talk (Channel Corp.) chat widget for support. For signed-in members, your member ID, GitHub username, email address and account status are sent to Channel Talk to link conversations to your account. Messages you write and widget usage data (including cookies) are processed by Channel Talk.
To operate, secure and measure the service, we process access and error records and analytics events, including IP address, user agent, visited path, time, approximate location, referrer and campaign parameters, session or visitor identifiers, and interaction or error details. Query strings are generally removed from stored paths; campaign parameters may be retained.
How long we keep it
Member account, address, project, request and review records are kept while needed to operate the account and service. Deleting a project removes it from public access and your workspace, but keeps its record internally for moderation and audit. Account deletion requests are reviewed and associated records removed unless they must be retained for a legal obligation or dispute; records can also remain in backups until those backups expire.
Sign-in sessions expire after 7 days. Access and analytics records are automatically removed after the configured retention period, 180 days by default and at least 7 days. Aggregated traffic counts are kept for twice that period.
External services and disclosure
GitHub handles sign-in and supplies your public profile data. Customer support is handled through Channel Talk (Channel Corp.). Sideplay uses Cloudflare for DNS and edge traffic, and forwards requests for your subdomain to the server you specify. Those services may process connection information to perform their functions.
We do not sell member information. We may disclose information when required by law or when necessary to respond to abuse or security incidents.
Cookies and security
We use short-lived OAuth and sign-in cookies for authentication. The sign-in cookie lasts up to 7 days. We use access controls and secure cookie settings to protect account information.
Your choices and rights
You may request access, correction, deletion, or suspension of processing of your personal information through the contact below. You can request removal of an address in your workspace. We will respond according to applicable law.
Operator and privacy contact
Junlab operates Sideplay. The privacy contact is the Sideplay Privacy Officer (Sideplay 개인정보담당자). Send questions or requests to the email below.